Assessment Scheme Document (ASD) – Annex A

The following document referenced in ITT Part 1, is included in this Annex.

| Reference | Title | |----------------------------|------------------------------------------------------------| | Issue 1.0 dated August 2013 | Assessment Scheme for Emergency Personal Locator Beacon (EPLB) | INTEGRATED LOGISTIC SUPPORT REQUIREMENTS FOR EMERGENCY PERSONAL LOCATOR BEACON (EPLB)

VERSION: 1.0 DATE: 24/09/2013

## AUTHORISATION

| Issue 1 | | |---------|---| | **Prepared by** | Stephen Caldwell | | **Title** | EPLB Technical Lead\
Air Platform Systems Project Team | | **Agreed by** | Rob Woods | | **Title** | EPLB Integrated Logistics Support Manager\
Air Platform Systems Project Team | | **Signature** | | | **Date** | Sep 13 | | **Authorised by** | Mr Ken Spreadborough | | **Title** | Team Leader\
Air Platform Systems Project Team | | **Signature** | | | **Date** | Sep 13 |

## AMENDMENT RECORD

| Issue | Pages Affected | Name | Comment | Date | |-------|----------------|------|---------|------| | 1.0 | N/A | DES APS-TMS8 | Issued Copy | 24/09/2013 | INTRODUCTION

1. **Document Purpose.** In addition to technical design and manufacture of the System the successful Tenderer is required to design a support solution for EPLB. In conjunction with constraints and boundaries covered in the SRD, the purpose of this document is to provide clarity about some of the constraints and boundaries that the Tenderer must factor into designing the ILS-derived support solution.

2. **Scope.** The likely support solution will use Authority provided and Contractor provided elements and the combined elements together will make up the whole support solution. This document will provide clarifying details on Project constraints and boundaries in order to help inform Tenderers’ understanding and their subsequent Tender responses. The intention is not to repeat information located elsewhere within the ITT pack, reference materials or System requirements. This document’s scope is restricted to constraints and boundaries topics that require further clarification.

3. It remains the Tenderer’s responsibility to design and demonstrate that the whole support solution meets the Authority stated requirements. In addition the Tenderer must derive the intermediate performance requirements for activities within their boundary of responsibility, such that each Party’s contribution to the overall performance can separately be measured.

4. **Important Guidance to Tenderers.** It is envisaged that the current scope of Tenderer and Authority supplied elements will remain largely unchanged for EPLB compared to that already in place for SARBE 7 (see Use Study for detail). Further details on constraints and boundaries are covered in paras 6 to 13.

ILS DOCUMENTATION

5. Tenderers new to ILS should recognise that the Authority uses and expects Tenderers to use an ILS approach to new System acquisition activity. The ILS approach, aim and benefits are explained within the Authority ILSP (included at SNITS Annex N Reference Material). The Authority tailors the scale of ILS it applies to the attributes of each individual project. As ILS is central to the Authority approach and what it requires in the Tender responses, ILS requirements appear in a number of different documents within the ITT Pack. A quick reference to the ILS documentation is included as Appendix 1 to this Annex, more detailed topic coverage in each case resides in these ILS documents.

SUPPORT OPTION CONSTRAINTS

6. Tenderers should be aware that the selected support solution needs to fit with existing policy, Service manpower structures and facilities. Importantly Tenderers should note that the System’s proposed support solution should closely follow the constraints guidance notes below:

   a. **Overall Service Manpower Numbers.** Service manpower numbers are set independent of individual project requirements. In this case the assumption is that Service manpower numbers supporting EPLB would be the same as that supporting the current beacon systems. (Use Study Section 1 Para 41 – Existing Manpower) b. **Service Maintenance Trades.** It is envisaged that the complement of existing Service maintenance trades directly involved in beacon maintenance will remain unchanged. (Use Study Section 1 Para 42 – Skill Levels and Training)

c. **Storage Volumes.** The expectation is that storage volumes at Service units will remain unchanged or reduced (some minimal increase in volume is acceptable if justified). (Use Study Annex C Post Visit Reports detail current storage at sites)

d. **Spare Ownership.** DE&S policy is toward reducing overall inventory holdings and ownership and so the Authority is keen to encourage solutions that minimise spares holdings within the higher level aim of securing the levels of System availability detailed within the System Requirement Document (SRD) and Statement of Work (SOW) (also see target System availability at Para 16). The SRD is provided as Annex E to SNITs and the SOW as Annex A to the Contract.

e. **Battery Management and Maintenance.** Battery selection and battery management are important functional and cost aspects of the new System. Battery selection constraints include air safety compliance, air carriage and Release to Service constraints. Battery maintenance is required to fit in with existing 30-week maintenance schedules driven by the Life Saver Jacket (LSJ) maintenance schedule. Battery management constraints are covered in DID EPLB-0701 (Annex L).

f. **Packaging & Transportation.** Military packaging requirements are necessary as the equipment will be handled within the JSC. Transportation arrangements must be capable of supporting the specified System availability levels. JSC Standard Priority System arrangements and timescales are detailed at JSP 886 Vol 3 Part1. Packaging, Handling, Storage and Transportation (PHS&T) are specified in DID-EPLB-0701 (Annex G)

g. **Facilities.** The facilities footprint should remain unchanged. New build requirements are not envisaged and the use of existing facilities is anticipated. Proposed changes to any existing facilities should be included in the Facilities Plan included in the Tenderer’s ISP DID-EPLB-0701 (Annex E).

h. **Support Equipment.** Tenderers should, where feasible, look to make use of existing maintenance equipment and test equipment already within the Authority Support Equipment and Test Equipment inventory.

i. **Technical Documentation (TD).** Supporting TD is required in electronic formats compliant with detail contained in DID-EPLB 0701 (Annex F).

j. **Training.** It is envisaged that existing training facilities and existing Service Training personnel will be used to deliver the overall EPLB training programme. The successful Tenderer will develop course materials in order to “train the trainers”. Further detail on training is provided at Appendix 3.

k. **Policy.** Tenderers should ensure, working with the Authority, that the support solution is conformant with Joint Support Chain (JSC) Supply Chain Management (SCM) policy guidelines as detailed within JSP 886 and the Acquisition Operating Framework (AOF) Support Solutions Envelope (SSE) requirements. SUPPORT SOLUTION BOUNDARY

07. **Tenderer Responsibilities.** The Tenderer responsibilities are covered in detail within the documents contained within the ITT Pack and within the Contract issued to the successful Tenderer. The main documents that include direct coverage of the boundaries of Tenderer’s responsibility are the SNITS, SOW, SRD, Use Study and DIDs. The purpose here is to highlight some of the significant boundaries or ones that may require some clarification. (Further topic coverage on support solution boundary responsibilities is provided at Appendix 2 to this Annex)

08. Tenderer Support ends where Service operation or usage takes over. For EPLB we define operational use as being the point at which fully functioning Systems are installed in the applicable Aircrew Equipment Assemblies (AEA) / Survival Equipment (SE) and handed over for use to an operational User.

09. The successful Tenderer will be responsible for the integration aspects for each EPLB variant and AEA /SE combination.

10. Included within the Tenderer’s support solution scope are areas that enable System operational use; as an example this includes “training the trainers”.

11. **Support Option Boundaries.** The Support Options Matrix within AOF describes the full range of support options that might exist for any new acquisition project from Spares Exclusive Upkeep to Capability Service (Off Balance Sheet). However, for EPLB the Tenderer must constrain proposed support solutions to an Asset Availability Service. Appendix 2 to this document lists the division of responsibilities between MOD and Industry for Asset Availability Services (AAS). Two types of AAS are shown: On Balance Sheet and Off Balance Sheet AAS. The key differentiator is asset ownership.

12. The “Capability Service” options are not appropriate as there are no credible opportunities to generate third party revenues. Spare Inclusive and Exclusive Upkeep options move the current support boundary back towards the supplier, taking elements best served by Industry into MOD control and represent a retrograde step. Insufficient opportunity exists to generate the required usage data to make incentivisation schemes based on repair or reliability viable options.

PERFORMANCE OF THE SUPPORT SOLUTION

13. A key Authority performance requirement is that that successful Tenderer can achieve the Initial Operating Capability (IOC) and Full Operating Capability (FOC) for the total number of EPLBs distributed as detailed in Enclosure 1 of this document. Tenderers should note the wide distribution of locations both UK and overseas when assessing the support solution supportability and transportation requirements.

14. Additionally the EPLBs will be supported to the following maintenance criteria: a. 1 hour maintenance down time per system per 15 week period. (The Life Preserver Winchmans/Diver (RN) is serviced every 15 weeks and after immersion). b. 1 hour maintenance downtime per system per 30 week period for all other users

15. The Authority availability requirement and assumption is a System that provides the Achieved Availability as defined in the Initial R&M Case at Annex S to the SNITS. The Achieved Availability figure applies to each variant: Live Operational variant; SE Fit/SERE Training Variant; and SAR Training Variant. The Tenderer’s support solution must be designed to meet this operational need.

**TRAINING – ILS REQUIREMENTS**

16. Training has been covered within the ITT document pack in the Use Study and DID EPLB-0701 (Enclosure 1 Annex H). The intention of covering Training again here is to provide some additional detail to inform Tenderers’ ILS Tender response on Training. The additional training requirement information is provided as Appendix 3 to this document.

17. The Tenderer is to scope the development of these courses in the Tender Response, however the number of courses to be undertaken will be subject to further options in the Contract. The previous estimate of number of courses required has been annotated in brackets, but will be subject to further planning with the Authority.

**APPENDICES**

1. ILS Documentation.

2. MOD vs Industry Division of Responsibility for Support Option: “Asset Availability Service”.

3. Training – ILS Factors.

4. EPLB Fielding Requirements. **ILS DOCUMENTATION**

ILS is referred to throughout the ITT and the table below is intended to guide Tenderers in understanding role and relationship between the documents:

| ILS Source Document | Information Location | Comment | |---------------------|----------------------|---------| | ILS Requirements Document. | This document. | High level requirement document for ILS. Explains project-specific ILS constraints and boundaries. | | ILSP | SNITS Annex N – Reference Material | Authority’s through-life plan for the implementation of ILS on EPLB. | | SRD | Annex E to ITT SNITS Annex B to Draft Contract | Includes, from an ILS perspective, the functional equipment aspects of ILS. | | ILS Data Item Description (DID) | Annex H to ITT SNITS Annex I to Draft Contract | Each ILS submission is covered by an ILS DID that describes the form and content of that submission. | | Special Notices & Instructions to Tenderers (SNITS) | SNITS sent to Tenderers at ITT | Instructions on the Tenderer’s Tender response requirements and Tender assessment information. | | SOW | Annex A to Draft Contract | States what ILS tasks shall be performed by the Tenderer and when they shall be accomplished. | | Integrated Support Plan (ISP) | Annex C to Draft Contract | The Tenderer Plan to implement ILS on EPLB, in response to the Authority requirements contained in the ITT. ISP is Tenderer produced. | | ILS Element Plans | SNITS Annex H | Most DID deliverables are Plans. One such DID 0700 is for an ISP. And the | | ILS Sub-Element Plan requirements are in DID 0700’s associated DID 0701. | APPENDIX 2 TO ANNEX B TO SNITS APSCM1/0015

MOD VS INDUSTRY DIVISION OF RESPONSIBILITY FOR SUPPORT OPTION: “ASSET AVAILABILITY SERVICE”

| UPKEEP (maintain, repair, overhaul) | Asset Availability Service (on balance sheet) | Asset Availability Service (off balance sheet) | |------------------------------------|-----------------------------------------------|-----------------------------------------------| | 1 Define maintenance policy | I | I | | 2 Define upkeep workscope | I | I | | 3 Define component repair policy | I | I | | 4 Define test acceptance limits | I | I | | 5 Plan upkeep requirements - depth | I | I | | 6 Plan upkeep requirements - forward| M | M | | 7 Execute upkeep - depth | I | I | | 8 Execute upkeep - forward | M | M |

| UPDATE (improve reliability/manage obsolescence) | |--------------------------------------------------| | 1 Specify requirement | I | I | | 2 Design and test | I | I | | 3 Approve | I | I | | 4 Embody | I | I |

| UPGRADE (improve performance/enhance capability) | |--------------------------------------------------| | 1 Specify requirement | M | M | | 2 Design and test | I | I | | 3 Approve | M | M | | 4 Embody | I | I |

NB – There currently are no UPGRADE plans for EPLB

| SPARES MANAGEMENT | |-------------------| | 1 Plan requirements - UPKEEP - depth | I | I | | 2 Plan requirements - UPKEEP - forward | M | M | | 3 Plan requirements - UPDATE | I | I | | 4 Plan requirements - UPGRADE | M | M | | 5 Procure for - UPKEEP - depth | I | I | | 6 Procure for - UPKEEP - forward | M | M | | 7 Procure for - UPDATE | I | I | | 8 Procure for - UPGRADE | M | M |

### TECHNICAL SUPPORT

| | Task | M | I | |---|-------------------------------------------|---|---| | 1 | Investigate faults in-service | I | I | | 2 | Control configuration | M + I | I | | 3 | Maintain technical documentation | M + I | I | | 4 | Maintain safety plans | M + I | M + I | | 5 | Ensure safety legislation adherence | M | M |

### PHYSICAL LOGISTICS

| | Task | M | I | |---|-----------------|---|---| | 1 | Move - forward | M | M | | 2 | Move - depth | I | I | | 3 | Store - forward | M | M | | 4 | Store - depth | I | I |

### ASSET OWNERSHIP

| | Task | M | I | |---|-----------------------|---|---| | 1 | Own assets | M | I | | 2 | Define asset pool size| M | I | TRAINING – ILS FACTORS

Section 1 - Location of Existing Training Courses

1. The following detail is provided as background detail on the EPLB training requirement. Training courses and training environment.

Operator Courses

RAF

2. RAF Operators are taught using PowerPoint presentations and training beacons delivered from the Tri-Service Aircrew Maritime Survival Drills course for Fast Jet, Multi-Engine Aircraft and Helicopters. Initial training is conducted at the Defence Survival Training organisation (DSTO) iaw MAA RA 2130. Continuation and Refresher training is delivered in Squadrons using the same training material and equipment.

RN

3. Initial Operator training as directed in MAA RA 2130 is delivered at DSTO, in accordance with the Royal Naval Air Engineering and the Tri-Service Aircrew Maritime Survival Drills courses for Fast Jet, Multi-Engine Aircraft and Helicopters. Continuation and Refresher training is delivered in Squadrons using the same training material and equipment.

Army

4. Army Operators are taught using PowerPoint presentations and training beacons delivered from the Tri-Service Aircrew Maritime Survival Drills courses for Fast Jet, Multi-Engine Aircraft and Helicopters. Initial training is delivered at the DSTO iaw MAA RA 2130. Continuation training is provided in the Field Army. This is delivered by the Unit SERE Instructor.

Maintainer Courses

RAF

5. RAF SE Maintainer training is delivered on the 1254 RAF Survival Equipment Fitter Training Course at Defence College of Aeronautical Engineering (DCAE), RAF Cosford. This course comprises 46 periods each of one hour duration. On completion of the course the attendees pass out as Leading Aircraftsmen (LACs). On posting to Units the LACs will take Trade Ability Tests (TATs) to confirm their ability and they will also receive familiarisation training as On The Job Training (OJT). The materials used to present the course are: (1) SARBE 7 training version – one per student plus one for the instructor; (2) SARBE 7 operational version – one for the instructor for demonstration; (3) test cabinet x 2; (4) Operating Beacon Detector x1; (5) various connectors associated with the Test Cabinet; 96) AP 116B0913123; (7) Mk 31 Survival Jacket. This is the Jacket used in the Tornado and is the most complex of all the current life preservers; and (8) PowerPoint presentations. RN
6. RN SE personnel are taught using PowerPoint presentations and training beacons. Initial SARBE 7 training is delivered on the RN SE maintainers’ initial trade training course at DCAE, Gosport. On completion of the course the attendees pass out as Naval Airmen (SE). When they deploy to the RN Air Stations they receive ‘On the Job Training’ (OJT) as required. Additionally there is SE cross training of Aircraft Engineering Technicians (AETs), carried out at DCAE, Gosport, to achieve manning efficiency on board smaller ships where no SE maintainers are carried. The AETs receive the relevant aspects of the SE trade training course including beacon maintenance. The materials used to present the courses at DCAE, Gosport are: (1) SARBE 7 training version – one per student plus one for the instructor; (2) Test Cabinet x 2; Operating Beacon Detector x 2; (3) various connectors associated with the Test Cabinet; (4) AP 116B0913123; (5) Mk 25 Life Preserver; and (6) PowerPoint presentations.

Army 7. There are no Army maintainers; these are provided by RAF SE Fitters.

User (SAR) Courses 8. The current training for SAR personnel is conducted in two phases. Phase 1 being the initial SAR training delivered at RAF Valley where, as part of the whole course, single beacon homing is taught. The second phase is delivered at RAF St Mawgan at the Sea King OCU. At St Mawgan homing is included as part of the conversion training to Sea King. This is initially carried out in a simulator and then as live training using training beacons.

Section 2 - Identification of the EPLB Training Requirements 9. The following training requirements for Operators, Maintainers and Users (SAR) have been identified:

Operators 10. Operators have the following training requirements: a. Trainers to attend a Train the Trainer course as detailed in Section 5. Other Operators to receive training from the EPLB trained Trainers in their Units. b. Course materials as detailed in Section 4.

Maintainers 11. Maintainers have the following training requirements. Trainers to attend a Train the Trainer course as detailed in Section 5. Other maintainers to receive training from the trained Trainers as determined by the DSTO. The course materials requirement is detailed in Section 4. User (Use of the EPLB in SAR Training)

12. The User has the following training requirements. Trainers from RAF Valley where initial SAR training is delivered, and RAF St Mawgan where Sea King conversion training is delivered, to attend a Train the Trainer course as detailed in Section 5. Other Users to be then trained by the Trainers in their Units. The course materials requirement is detailed in Section 4.

Section 3 - Identification of the Training Delta

13. The training delta for each of the three groups; Operators, Maintainers and Users (SAR) is detailed below.

Operators

14. The differences between EPLB and SARBE 7 are:

a. Frequency: The alerting frequency is now 406 MHz. This is transparent to the Operator and therefore has no impact on the Operator training.

b. Operation: The EPLB, exact model yet to be decided, will likely have a different operation. For example to manually switch it on and off and remove aerials is likely to be different. It may also have a GPS capability with its own aerial. These non-exhaustive differences will require addressing in the Operator training courses.

15. General training objectives for Operators are: (1) EPLB in the context of SAR; (2) operation of the EPLB on Land and Sea for alert and manual switch off; and (3) performance specification of EPLB

Maintainers

16. The differences between the SARBE 7 and EPLB are as for the Operators together with maintenance specific differences. The Test Equipment used is likely to be different as will be the processes within the Technical documentation. Exact differences cannot be ascertained at this time since the specific EPLB model has not yet been selected.

17. General training objectives for maintainers will include: (1) EPLB in the context of SAR; (2) operation of the EPLB alert and manual switch off; (3) use of Test equipment (if applicable); (4) testing of EPLB for serviceability; (5) use of Technical documentation to affect procedural maintenance; and (6) test specifications.

User (SAR)

18. The differences between the SARBE 7 and EPLB are as for the Operators together with specific differences in respect of differences in tone between SARBE 7 and EPLB when using existing ‘homing’ equipment for location of a beacon. The provision of a GPS capability may require the SAR training to be revised to accommodate this function.

19. General training objectives for Users (SAR) are: (1) EPLB in the context of SAR; (2) operation of the EPLB on Land and Sea for alert and manual switch off; and (3) performance specification of EPLB. The Training Gap

20. There is no perceived training gap. Current courses that support SARBE 7 training may be adapted to suit EPLB training with the provision of similar training material as exists for SARBE 7 training. In respect of maintainer training, it may even be possible to reduce the training burden if the system procured is deemed maintenance free or is solely maintained by the contractor.

Section 4 - Course Materials Required

OPERATORS

RN Operator Course

21. Equipment per Contract Schedule of Requirements and additional optional supply if required.

22. Homing Techniques Video.

23. Video with training sound track covering: (1) use on Land; (2) use as a survivor in LP; (3) use in SS dinghy; and 4 () use in MS dinghy (MS10)

24. Amendments to Publications, including: (1) BR 767, Naval Aviation Orders, Order 130, Safety and Survival Drills; (2) JSP 550; (3) AP3456; and (4) JSP 374.

25. Non copyright CD containing PowerPoint presentations covering: (1) simplified performance Specification and (2) basic operating instructions for activation for alert and manual switch off.

RAF Operator Course

26. Equipment per Contract Schedule of Requirements and additional optional supply if required.

27. Homing Techniques Video.

28. Video with training sound track covering: (1) use on Land; (2) use as a survivor in LP; (3) use in SS dinghy; and 4 () use in MS dinghy (MS10)

29. Amendments to Publications including: (1) JSP 550; 92) AP3456; and (3) JSP 374.

30. Non copyright CD containing PowerPoint presentations covering: (1) simplified performance Specification and (2) basic operating instructions for activation for alert and manual switch off.

AAC Operator Course

31. Equipment per Contract Schedule of Requirements and additional optional supply if required.

32. Non copyright CD containing PowerPoint presentations covering: (1) simplified performance Specification and (2) basic operating instructions for activation for alert and manual switch off.

33. Video with training sound track covering: (1) use on Land; (2) use as a survivor in LP; (3) use in SS dinghy; and 4 () use in MS dinghy (MS10)

**Maintainers**

34. The course materials for Maintainer training is dependant on the beacon type that is procured. Assuming a similar maintenance policy as for SARBE 7 the following maintenance training material will be required. Note that the maintenance policy may be different and this will affect the requirements below.

**RN SE Maintainer Course**

35. Equipment per Contract Schedule of Requirements and additional, optional supply if required.

36. Special to Type Test Equipment (STTE) as required by proposed solution

37. Air Publications

38. Non copyright CD containing PowerPoint presentations covering: (1) simplified performance Specification and (2) basic operating instructions for activation for alert and manual switch off.

39. Other instructional items as required

**RAF SE Fitter Course**

40. Equipment per Contract Schedule of Requirements and additional, optional supply if required.

41. Special to Type Test Equipment (STTE) as required by proposed solution

42. Air Publications

43. Non copyright CD containing PowerPoint presentations covering: (1) simplified performance Specification and (2) basic operating instructions for activation for alert and manual switch off.

44. Other instructional items as required.

**Users (SAR)**

**Search and Rescue Course**

45. Equipment per Contract Schedule of Requirements and additional optional supply if required.

46. Homing Techniques Video.

47. Video with training sound track covering: (1) use on Land; (2) use as a survivor in LP; (3) use in SS dinghy; and 4 () use in MS dinghy (MS10)

48. Amendments to Publications including: (1) JSP 550; 92) AP3456; and (3) JSP 374.

49. Non copyright CD containing PowerPoint presentations covering: (1) simplified performance Specification and (2) basic operating instructions for activation for alert and manual switch off.

Section 5 - Train the Trainer Courses

RN Operator

50. The course number requirement is One (Previous Estimate Two). These will be delivered to Drill Instructors from RNAS Culdrose, Yeovilton, Prestwick and large ships. The Number of Personnel per course is Ten maximum. Course attendees (subject to change) will be provided from the following Units: (1) Three from SET; (2) Three from SERE TC, DSTO, Gosport; (3) Two from RNAS Yeovilton; (4) Two from RNAS Culdrose; (5) One from Prestwick; and (6) Two from the Carriers

RAF, SAR and AAC Operator Courses Combined

51. The course number requirement is One (Previous Estimate Four). The number of Personnel per course is Twenty Five.

RN SE Maintainer

52. The course number requirement is One (Previous Estimate Two) (note that the number of courses will depend on the maintenance complexity and the maintenance policy). The number of Personnel per course is Ten.

RAF SE Maintainer

54. The course number requirement is One (Previous Estimate Three) (note that the number of courses will depend on the maintenance complexity and the maintenance policy). The number of Personnel per course is Ten.

# EPLB Fielding Requirements

## IOC EPLB SCALING LIST - FIELDING PLAN

*(List is correct at time of ITT issue but subject to final confirmation and minor amendment)*

| FLC | Unit / Ac Type | Live Op | SERE/SE Fitt | Jacket Type | |--------------|---------------------------------|---------|--------------|-------------------------------------------------| | FLEET | Culdrose 820 Merlin Mk 1/2 | 35 | 15 | Mk 61 | | JHC | Odiham (JSFAW) | 60 | 20 | BALCS | | | 658 Sqn Hereford | 30 | 3 | BALCS | | AIR - 2Gp | Multi Engine (BZN) | C130J | 120 | 25 | | | | | | Mk 40/BALCS (Mk40 will be default jacket with BALCS for Operational use) | | AIR- 1Gp FJ | Typhoon (Coningsby & Los) | 141 | 4 | Typhoon LSJ | | | Tornado GR4 (Marham & Los?) | 125 | 2 | Mk41 | | | Coningsby 41 Sqn | 12 | | Mk41 / Typhoon LSJ | | | Leeming (100 Sqn - Hawk) | 31 | 2 | Mk40 | | AIR- 1Gp ISTAR (Wad) | NOT INCLUDED IN IOC | | | | | AIR - SAR | NOT INCLUDED IN IOC | | | | | AIR - FI | NOT INCLUDED IN IOC | | | | | AIR - 22 Trg Gp | NO1 SoTT (DCAE Cosford) | 15 | N/A | | | | DSTO St Mawgan | 35 | N/A | | | | RAFAT (Hawk) | 30 | 1 | Mk 40 | | | Valley (Hawk) | 130 | 10 | Mk 40 | | | Linton-on-Ouse (Tucano) | 60 | 10 | Mk 40 | | TOTAL BY VARIETY | | 774 | 142 | | | SUB-TOTAL OF ALL EPLB VARIETIES | | 916 | | | | Live Testing Variant | | 15 | | | | Space and Weight Variant | | 4 | | | | SAR Training Variant for ISD | | 1 | | | | GRAND TOTAL ALL EPLB VARIANTS | | 936 | | |

### IOC EPLB Variants

| Variant | Quantity | |----------------------------------------------|----------| | Ejection Variant | 529 | | Non-Ejection Variant (worn) | 125 | | Non-Ejection Variant (stowed) | 120 | | SAR Training Variant | 1 | | SERE/FITT Training Variant | 142 | | Live Testing Variant | 15 | | Space & Weight Model Variant | 4 | | **TOTAL** | **936** |

### IOC Jacket Families For Integration

| Family | Mk 61 | Mk 65 | Mk 66 | Mk 40 | Mk 41 | Typhoon LSJ | n/k | **TOTAL** | |--------|-------|-------|-------|-------|-------|-------------|-----|-----------| | BALCS | 210 | | | | | | | | | | | 35 | 1 | | | | | | | | | | 1 | | | | | | | Family 6\* | 37 | | | | | | | | | | | | | 251 | | | | | | Family 4\* | 384 | | | | 133 | | | | | Typhoon LSJ | 145 | | | | | | | | | n/k | 0 | | | | | | | | | **TOTAL** | **776** | | | | | | | |

## FOC EPLB SCALING LIST - FIELDING PLAN

(List is correct at time of ITT issue but subject to final confirmation and minor amendment)

| Command / Group | Location | Aircraft | EPLB | SAR Training Beacon | SERE Training Beacon | Jacket Mod Kits | Jacket Type | |-----------------|----------|----------------|------|---------------------|----------------------|-----------------|-------------| | Culdrose | Merlin Mk 1/2 | 35 | | 82 | 35 | Mk 61 | | Culdrose | Merlin Mk 1/2 | 35 | | 35 | Mk 61 | | Yeovilton | Lynx Mk8 | 80 | | 80 | Mk 61 | | Yeovilton | Wildcat | 80 | | 80 | Mk 66 | | Yeovilton | Lynx Mk8 | 16 | | 16 | Mk 61 | | Yeovilton | Wildcat | 16 | | 16 | Mk 66 | | Culdrose | Sea King Mk 7 | 15 | | 15 | Mk 61 | | Culdrose | Sea King Mk 7 | 12 | | 15 | Mk 61 | | Culdrose | Sea King Mk 7 | 15 | | 15 | Mk 61 | | Culdrose | Merlin Mk 1/2 | 50 | | 50 | Mk 61 | | Yeovilton | Wildcat | 18 | | 18 | Mk 66 | | Yeovilton | Lynx Mk8 | 26 | | 26 | Mk 61 | | Yeovilton | Wildcat | 26 | | 26 | Mk 66 | | Culdrose | Hawk | 15 | | 15 | Mk 40L | | Yeovilton | Hawk | 12 | | 12 | Mk 40L | | Yeovilton | Grob Tutor | 6 | | 6 | Mk 40 | | Yeovilton | Sea King Mk 5 | 5 | | 5 | Mk 40 | | Culdrose | Merlin Mk 1/2 | 40 | | 40 | Mk 61 | | Culdrose | Sea King Mk 5 | 69 | 2 | 35 | Mk 61 | | Culdrose | Sea King Mk 5 | 34 | | | Mk 40 | | Prestwick | Sea King Mk 5 | 20 | 2 | 10 | Mk 61 | | Prestwick | Sea King Mk 5 | 10 | | | Mk 40 | | Culdrose | King Air | 30 | | 30 | Mk 40 | | Yeovilton | Swordfish | 9 | | 9 | Mk 40 | | Yeovilton | Sea King | 12 | | 12 | Mk 61 | | Yeovilton | Lynx | | | | | | Culdrose | Sea King | 16 | | 16 | Mk 61 | | Culdrose | Merlin | | | | | | JHC | Aldergrove | Islander | 70 | 2 | 70 | BALCS | | Aldergrove | D4K | | | | | | Aldergrove | Gazelle | | | | | | Benson | Puma | 220 | 30 | 220 | BALCS | | Benson | Merlin | | | | | | Dishforth | Lynx | 80 | 10 | 80 | BALCS | | Middle Wallop | Lynx | 190 | 5 | 146 | BALCS | | Location | Aircraft | Quantity | Engine | Model | |----------------|-------------------|----------|--------|---------| | Middle Wallop | Apache | 24 | Mk 65 | | | Brunei | Bell 212 | 17 | 1 | 17 | Mk 40 | | BATUS | Gazelle | 11 | 1 | 11 | Mk 40 | | Kenya | Bell 212 | 18 | 1 | 18 | Mk 40 | | Odiham | Chinook | 280 | 20 | 280 | BALCS | | Hereford | n/k | 30 | 3 | 20 | BALCS | | Wattisham | Apache | 145 | 8 | 125 | BALCS | | Yeovilton | Sea King Mk 4 | 175 | 15 | 175 | BALCS | | Yeovilton | Wildcat | 130 | 10 | 130 | Mk 66 | | AIR - 2Gp | Brize Norton C130J| 120 | 25 | 120 | Mk 40 | | Multi Engine | Brize Norton A400M| 110 | 0 | 110 | Mk 40 | | (BZN) | Brize Norton Voyager| 56 | 0 | 56 | Mk 40 | | | Brize Norton C17 | 40 | 0 | 40 | Mk 40 | | AIR - 1Gp | Boscombe Down n/k | 130 | | | | | FJ | | | | | | | AIR - 1Gp | Coningsby Typhoon | 141 | 4 | 138 | Typhoon LSJ | | ISTAR (Wad) | Marham Tornado | 125 | 2 | 129 | Mk41 | | | Coningsby Typhoon | 12 | 8 | | Mk41 | | | | | 4 | Typhoon LSJ | | | Leeming Hawk | 31 | 2 | 31 | Mk40 | | | Waddington E3D Sentry| 144 | 2 | 0 | Mk 40 | | | Waddington Sentinel| 48 | 0 | | Mk 40 | | | Waddington Airseeker| 111 | 0 | | Mk 40 | | | Waddington Shadow | 15 | 0 | | Mk 40 | | AIR - 1GP | Coningsby Lancaster, Spitfire, Hurricane, Chipmunk Dakota| 4 | 4 | Mk 40 | | BBMF | | | | | | | AIR - SAR | Lossiemouth Sea King| 16 | 2 | 16 | Mk 40 | | | Boulmer Sea King | 16 | 2 | 16 | Mk 40 | | | Leconfield Sea King| 16 | 2 | 16 | Mk 40 | | | Chivenor Sea King | 16 | 2 | 16 | Mk 40 |

Page 21 of 26 | Location | Aircraft | Quantity | Quantity | Quantity | Type | |----------------|-----------|----------|----------|----------|-------| | Wattisham | Sea King | 16 | 2 | 16 | Mk 40 | | | | | | | BALCS | | Valley | Sea King | 36 | 5 | 36 | Mk 40 | | | | | | | BALCS | | Akrotiri | Sea King | 14 | 3 | 0 | | | Falkland Islands | C130J | 5 | 0 | 9 | Mk 40 | | Falkland Islands | KC10 | | 0 | | BALCS | | Falkland Islands | | 16 | 2 | 0 | Mk 40 | | Falkland Islands | | | | 16 | BALCS | | Falkland Islands | Typhoon | | 0 | | Typhoon LSJ | | RAFAT | Hawk | 30 | 1 | 30 | Mk 40 | | Valley | Hawk | 130 | 10 | 130 | Mk 40 | | Linton-on-Ouse | Tucano | 60 | 10 | 60 | Mk 40 | | Cranwell | King Air | 30 | 1 | 30 | Mk 40 | | DHFS | Griffin | 180 | 4 | 180 | BALCS | | Valley | SARTU | 36 | 3 | 1 | 36 | BALCS | | Cranwell | n/k | 12 | 1 | 12 | n/k | | Cosford | n/k | 6 | 1 | 6 | n/k | | Leuchars | n/k | 21 | 1 | 21 | n/k | | Leeming | n/k | 8 | 1 | 8 | n/k | | Boscombe Down | n/k | 6 | 1 | 6 | n/k | | Benson | n/k | 7 | 1 | 7 | n/k | | Barkston | n/k | 10 | 1 | 10 | n/k | | Colerne | n/k | 12 | 1 | 12 | n/k | | Glasgow | n/k | 8 | 1 | 8 | n/k | | Church Fenton | n/k | 16 | 1 | 16 | n/k | | Wyton | n/k | 12 | 1 | 12 | n/k | | St Athan | n/k | 12 | 1 | 12 | n/k | | Woodvale | n/k | 25 | 1 | 25 | n/k | | Cosford | n/k | 15 | 0 | | n/k | | St Mawgan | n/k | 35 | 0 | | n/k | | Boscombe Down | n/k | 13 | 13 | | n/k | | Cranwell | n/k | 20 | 0 | | n/k |

**TOTAL BY VARIETY**

| Quantity | Quantity | Quantity | |----------|----------|----------| | 3774 | 25 | 335 | | Jacket Families for Integration | EPLB Variants | |--------------------------------|---------------| | BALCS | 2322 Ejection Variant 529 | | Mk 61 | 484 Non-Ejection Variant Worn 2596 | | Mk 65 | 44 Non-Ejection Variant Stowed 649 | | Mk 66 | 140 SAR Training Variant 25 | | Family 6\* | 668 SERE/FITT Training Variant 335 | | Mk 40 | 622 Live Testing Variant 15 | | Mk 41 | 164 Space & Weight Model Variant 4 | | Family 4\* | 786 Total 4153 | | Typhoon LSJ | 142 | | assumption for N/K - 50/50 Split BALCS and Mk 61 | 168 | | Total | 3918 |

### SUMMARY OF IOC, FOC AND JACKET INTEGRATION DETAIL - FIELDING PLAN

(List is correct at time of ITT issue but subject to final confirmation and minor amendment)

| EPLB Variant | Jacket Families For Integration | |-------------------------------|---------------------------------| | Ejection Variant | BALCS | | Non-Ejection Variant Worn | Mk 61 | | Non-Ejection Variant Stowed | Mk 65 | | SAR Training Variant | Mk 66 | | SERE/FITT Training Variant | Family 6\* | | Live Testing Variant | Mk 40 | | Space & Weight Model Variant | Mk 41 | | **Total** | **Family 4** | | | **Typhoon LSJ** | | | **Jkt Type tbc** | | | **Total** |

- EPLB Variant: 529
- BALCS: 2322
- Mk 61: 484
- Mk 65: 44
- Mk 66: 140
- Family 6\*: 668
- Family 4\*: 786
- Typhoon LSJ: 142
- Jkt Type tbc: 168
- Total: 3918 | IOC | Batch 1 - IOC - Initial Batch of Equipment for IOC Fielding | |-----|----------------------------------------------------------| | | EPLB Variants | Jacket Families For Integration | | | Ejection Variant | BALCS | 21 | | | Non-Ejection Variant (worn) | Mk 61 | 35 | | | Non-Ejection Variant (stowed) | Mk 65 | 1 | | | SAR Training Variant | Mk 66 | 1 | | | SERE/FITT Training Variant | Family 6\* | 37 | | | Live Testing Variant | Mk 40 | 25 | | | Space & Weight Model Variant | Mk41 | 13 | | | Total | Family 4\* | 38 | | | Subsequent Batches 2,3 & 4 to met FOC | Typhoon LSJ | 14 | | | | TOTAL | 77 | | Jacket & Platforms Table | Mk 40 (M) | Mk 40 (L) | Mk 41 (M) | Mk 61 (M) | Mk 65 | Mk 66 | BALCS | |--------------------------|-----------|-----------|-----------|-----------|-------|-------|-------| | Typhoon | Hawk | Hawk | Tornado | Merlin | Apache| Wildcat| Islander | | King Air | Lynx | | | | | | D4K | | Sea King | | | Sea King | | | | Gazelle | | Swordfish | | | | | | | Lynx | | E3D Sentry | | | | | | | Chinook | | Sentinel | | | | | | | Apache | | Airseeker | | | | | | | Wildcat | | Shadow | | | | | | | C130J | | C130J | | | | | | | A400M | | A400M | | | | | | | Voyager | | Voyager | | | | | | | C17 | | Tucano | | | | | | | E3D Sentry | | King Air | | | | | | | Sentinel | | Airseeker | | | | | | | A139 | | Shadow | | | | | | | Griffin | | Griffin | | | | | | | Squirrel | | Voyager | | | | | | | SARTU | Restricted Security Conditions UK

Definitions

1. The term "Authority" means a Ministry of Defence official acting on behalf of the Secretary of State for Defence.

Security Grading

2. The Authority shall issue a RESTRICTED Aspects Letter which shall define the RESTRICTED matter that is furnished, or which is to be developed, under this Contract. The Contractor shall mark all RESTRICTED documents which he or she originates or copies during the Contract with the equivalent national grading.

Official Secrets Acts

3. The Contractor's attention is drawn to the provisions of the Official Secrets Acts 1911 to 1989 in general, and to the provisions of Section 2 of the Official Secrets Act 1911 (as amended by the Act of 1989) in particular. The Contractor shall take all reasonable steps to make sure that all individuals employed on any work in connection with the Contract have notice that these statutory provisions apply to them and shall continue so to apply after the completion or earlier termination of the Contract.

Protection of RESTRICTED Information

4. RESTRICTED information shall be protected in a manner to promote discretion in order to avoid unauthorised access. The Contractor shall take every effort to prevent the loss or compromise of the information or deliberate or opportunist attack.

5. Disclosure of RESTRICTED information shall be strictly in accordance with the "need to know" principle. Except with the written consent of the Authority, the Contractor shall not disclose the Contract or any provision thereof to any person other than a person directly employed by the Contractor or sub-Contractor, or Service Provider.

6. Any samples, patterns, specifications, plans, drawings or any other documents issued by or on behalf of the Authority for the purposes of the Contract remain the property of the Authority and must be returned on completion of the Contract or, if directed by the Authority, destroyed in accordance with paragraph 22.

7. When not in use RESTRICTED documents shall be stored under lock and key.

Access

08. Access shall be confined to those individuals who have a “need-to-know” and whose access is essential for the purpose of his or her duties.

09. The Contractor shall ensure that all individuals having access to RESTRICTED information meet legal requirements in respect of immigration and the right to work in the UK and have undergone basic recruitment checks. Contractors shall apply the requirements of HMG Baseline Personnel Security Standard (BPSS) for all individuals having access to RESTRICTED information. Further details and the full requirements of the BPSS can be found at the Cabinet Office website at Transmission of RESTRICTED Information

10. RESTRICTED documents shall be transmitted, both within and outside company premises in such a way as to make sure that no unauthorised person has access. They may be sent by ordinary post in a single envelope. The word RESTRICTED must NOT appear on the envelope. The envelope should bear a company stamp that clearly indicates the full address of the office from which it was sent. Commercial Couriers may be used.

11. Advice on the transmission of RESTRICTED documents abroad or any other general advice including the transmission of RESTRICTED hardware shall be sought from the Authority.

Use of Communications and IT Systems

12. The detailed functions that must be provided by an IT system to satisfy the minimum requirements described below cannot be described here; it is for the implementers to identify possible means of attack and ensure that they are blocked.

13. As a general rule, any communication path between an unauthorised user and the data can be used to carry out an attack on the system or be used to compromise or exfiltrate data.

14. The following describes the minimum Accreditation security requirements for processing and accessing RESTRICTED information on IT systems.

a. Access. Physical access to all hardware elements of the IT system is to be strictly controlled.

b. Identification and Authentication (ID&A). All systems shall have the following functionality:

```
  (1) Up-to-date lists of authorised users.

  (2) Positive identification of all users at the start of each processing session.
```

c. Passwords. Passwords are part of most ID&A, Security Measures. Passwords shall be minimum of 6 characters long (9 is preferred) and shall include numeric and "special" characters (if permitted by the system) as well as alphabetic characters.

d. Internal Access Control. All systems shall have internal Access Controls to prevent unauthorised users from accessing or modifying the data.

e. Data Transmission. RESTRICTED information shall be transmitted or accessed electronically (e.g. point to point computer links) via a public network like the Internet, using commercial encryption devices accepted by the UK MoD. Advice on encryption requirements for the transmission of RESTRICTED information shall be sought from MoD CIO-InfoSy Pol via the Authority. However, in cases where there is a pressing business need, telephone conversations, video conferencing or facsimile transmissions containing RESTRICTED information may be in clear text. In such cases where a pressing business need has been identified, both parties need to accept that there exists the potential for a risk of compromise. When taking a decision to communicate RESTRICTED information in this way they should be aware of the impact of disclosure. f. **Security Accounting and Audit.** Security relevant events fall into two categories, namely legitimate events and violations.

(1) The following events shall always be recorded:

```
  (a) All log on attempts whether successful or failed.
  (b) Log off (including time out where applicable).
  (c) The creation, deletion or alteration of access rights and privileges.
  (d) The creation, deletion or alteration of passwords.
```

(2) For each of the events listed above, the following information is to be recorded:

```
  (a) Type of event,
  (b) User ID,
  (c) Date & Time
  (d) Device ID
```

The accounting records shall have a facility to provide the System Manager with a hard copy of all or selected activity. There shall also be a facility for the records to be printed in an easily readable form. All security records are to be inaccessible to users without a need to know.

If the operating system is unable to provide this then the equipment shall be protected by physical means when not in use i.e. locked away or the hard drive removed and locked away.

g. **Integrity & Availability.** The following supporting measures shall be implemented:

```
  (1) Provide general protection against normally foreseeable accidents/mishaps and known recurrent problems (e.g. viruses and power supply variations)
  (2) Defined Business Contingency Plan
  (3) Data backup with local storage
  (4) Anti Virus Software (Implementation, with updates, of an acceptable industry standard Anti-virus software).
```

h. **Logon Banners.** Wherever possible, a “Logon Banner” shall be provided to summarise the requirements for access to a system which may be needed to institute legal action in case of any breach occurring.

```
  (1) A suggested format for the text depending on national legal requirements could be:

  (a) “Unauthorised access to this computer system may constitute a criminal offence”
```

i. **Unattended Terminals.** Users are to be automatically logged off the system if their terminals have been inactive for some predetermined period of time, or systems must activate a password protected screen saver after 15 minutes of inactivity, to prevent an attacker making use of an unattended terminal.

j. **Internet Connections.** Computer systems shall not be connected direct to the Internet unless protected by a firewall (a software based personal firewall is the minimum) which is acceptable to the Authority’s Principal Security Advisor.

k. **Disposal.** Before IT storage media (e.g. disks) are disposed of, an erasure product shall be used to overwrite the data. This is a more thorough process than deletion of files, which does not remove the data. Laptops

15. Laptops holding any MoD supplied information are to have, as a minimum, a FIPS 140-2 approved full disk encryption solution installed.

16. Unencrypted laptops not on a secure site are to be recalled and only used or stored in an appropriately secure location until further notice or until approved full encryption is installed. Where the encryption policy cannot be met, a Risk Balance Case that fully explains why the policy cannot be complied with and the mitigation plan, which should explain any limitations on the use of the system, is to be submitted to the Authority for consideration. Unencrypted laptops and drives containing personal data are not to be taken outside of secure sites. For the avoidance of doubt the term “drives” includes all removable, recordable media (e.g. memory sticks, compact flash, recordable optical media (e.g. CDs and DVDs), floppy discs and external hard drives.

17. Any token, touch memory device or password(s) associated with the encryption package is to be kept separate from the machine whenever the machine is not in use, left unattended or in transit.

18. Portable CIS devices are not to be left unattended in any public location. They are not to be left unattended in any motor vehicles either in view or in the boot or luggage compartment at any time. When the vehicle is being driven the CIS is to be secured out of sight in the glove compartment, boot or luggage compartment as appropriate to deter opportunist theft.

Loss and Incident Reporting

19. Any loss of RESTRICTED information shall be reported without delay to the Authority.

20. Any security incident involving any MOD owned, processed or generated information shall be immediately reported to the MOD Defence Industry Warning, Advice and Reporting Point (WARP), within the Joint Security Co-ordination Centre (JSyCC). This will assist the JSyCC in formulating a formal information security reporting process and the management of any associated risks, impact analysis and upward reporting to the MOD’s Chief Information Officer (CIO) and, as appropriate, the company concerned. The MOD WARP will also advise the contractor what further action is required to be undertaken.

JSyCC WARP Contact Details Email: For those with access to the RLI: CIO-DSAS-JSyCCOperations Email: For those without access to the RLI: CIO-DSAS-JSyCCOperations@mod.uk (Unclassified) Telephone: Working Hours: 030 677 021 187 Out of Hours/Duty Officer Phone: 07768 558863 Fax: 01225 846904 Mail: Joint Security Co-ordination Centre (JSyCC), GOSCC, Building 405, MOD Corsham, Westwells Road, Wiltshire, SN13 9NR

Sub-Contracts

21. The Contractor may Sub-contract any elements of this Contract to Sub-contractors within the United Kingdom notifying the Authority. When doing so these security conditions shall be incorporated within the Sub-contract document. The prior approval of the Authority shall be obtained should the Contractor wish to Sub-contract any elements of the Contract to a Sub-contractor in another country.

Publicity Material

22. Contractors wishing to release any publicity material or display hardware that arises from this contract, whether directly or indirectly, or from a Defence related Private Venture activity, must seek the prior approval of the Authority. Publicity material includes open publication in the contractor’s publicity literature or website or through the media; displays at exhibitions in any country; lectures or symposia; scientific or technical papers, or any other occasion where members of the general public may have access to the information even if organised or sponsored by the MoD, Services or any other government department.

**Destruction**

23. As soon as no longer required RESTRICTED information/material shall be destroyed in such a way as to make reconstitution very difficult or impossible, for example, by burning, shredding or tearing into small pieces. Unwanted RESTRICTED information/material which cannot be destroyed in such a way shall be returned to the Authority.

**Interpretation/Guidance**

24. Advice regarding the interpretation of the above requirements should be sought from the Authority.

25. Further requirements, advice and guidance for the protection of MOD information at the level of RESTRICTED and below can be found in Industrial Security Notices (ISNs) at:

http://www.mod.uk/DefenceInternet/AboutDefence/WhatWeDo/SecurityandIntelligence/DESPSYA/

**Audit**

26. Where considered necessary by the Authority the Contractor shall permit the inspection of the Contractors processes and facilities to ensure compliance with these requirements Restricted Security Conditions Overseas

Definitions

1. The term "Authority" means a Ministry of Defence official acting on behalf of the Secretary of State for Defence.

Security Grading

2. The Authority shall issue a Security Aspects Letter which shall define the UK RESTRICTED matter that is furnished, or which is to be developed, under this Contract. The Contractor shall mark all UK RESTRICTED documents that he or she originates or copies during the Contract in accordance with the Security Aspects Letter.

Protection of RESTRICTED Information

3. UK RESTRICTED information shall be protected in a manner to promote discretion in order to avoid unauthorised access. The contractor shall take every effort to prevent the loss or compromise of the information or deliberate or opportunist attack.

4. Except with the consent in writing of the Authority, the Contractor shall not disclose the Contract or any of its provision to any person other than a person directly employed by the Contractor or sub-Contractor, or Service Provider.

5. Except with the consent in writing of the Authority the Contractor shall not make use of the Contract or any information issued or furnished by or on behalf of the Authority otherwise than for the purpose of the Contract, and, save as provided for in Clause 6 the Contractor shall not make use of any article or part thereof similar to the Articles for any other purpose.

6. Subject to any rights of Third Parties, nothing in this Condition shall restrict the Contractor from using any specifications, plans, drawings and other documents generated outside of this Contract.

7. Any samples or patterns or any specifications, plans, drawings or any other documents issued by or on behalf of the Authority for the purposes of the Contract remain the property of the Authority and must be returned on completion of the Contract or, if directed by the Authority, destroyed in accordance with paragraph 22.

8. When not in use UK RESTRICTED documents shall be stored under lock and key.

Access

09. Access to UK RESTRICTED information shall be confined to those individuals who have a “need-to-know” and whose access is essential for the purpose of his or her duties.

10. The Contractor shall ensure that all individuals requiring access to UK RESTRICTED information have undergone basic recruitment checks. This should include establishing proof of identity; confirming that they satisfy all legal requirements for employment by the Contractor; and verification of their employment record. Criminal record checks should also be undertaken where permissible under national/local laws and regulations. This is in keeping with the core principles set out in the HMG Baseline Personnel Security Standard (BPSS). Loss and Incident Reporting

11. Any loss of a UK RESTRICTED document shall be reported without delay to the Authority.

12. Any security incident involving any MoD owned, processed or generated information shall be immediately reported to the MoD Defence Industry Warning, Advice and Reporting Point (WARP), within the Joint Security Co-ordination Centre (JSyCC). This will assist the JSyCC in formulating a formal information security reporting process and the management of any associated risks, impact analysis and upward reporting to the MoD’s Chief Information Officer (CIO) and, as appropriate, the company concerned. The MoD WARP will also advise the contractor what further action is required to be undertaken.

JSyCC WARP Contact Details Email: For those with access to the RLI: CIO-DSAS-JSyCCOperations Email: For those without access to the RLI: CIO-DSAS-JSyCCOperations@mod.uk (Unclassified) Telephone: Working Hours: +44 (0) 30 677 021 187 Out of Hours/Duty Officer Phone: +44 (0)7768 558863 Fax: + 44 (0)1225 846904 Mail: Joint Security Co-ordination Centre (JSyCC), GOSCC, Building 405, MOD Corsham, Westwells Road, Wiltshire, SN13 9NR

Dispatch of Information

13. UK RESTRICTED documents shall be transmitted in such a way as to make sure that no unauthorised person has access. Postal transmissions outside of the company must be in at least one envelope/package; Commercial Couriers may be used. The word UK RESTRICTED must not appear on the envelope.

Use of Communications and IT Systems

14. The detailed functions that must be provided by an IT system to satisfy the minimum requirements described below cannot be described here; it is for the implementers to identify possible means of attack and ensure that they are blocked.

15. As a general rule, any communication path between an unauthorised user and the data can be used to carry out an attack on the system or be used to compromise or exfiltrate data.

16. The following describes the minimum Accreditation security requirements for processing and accessing UK RESTRICTED information on IT systems.

a. Access. Physical access to all hardware elements of the IT system is to be strictly controlled.

b. Identification and Authentication (ID&A). All systems shall have the following functionality:

```
  (1) Up-to-date lists of authorised users.

  (2) Positive identification of all users at the start of each processing session.
```

c. Passwords. Passwords are part of most ID&A, Security Measures. Passwords shall be minimum of 6 characters long (9 is preferred) and shall include numeric and “special” characters (if permitted by the system) as well as alphabetic characters. d. **Internal Access Control.** All systems shall have internal Access Controls to prevent unauthorised users from accessing or modifying the data.

e. **Data Transmission.** UK RESTRICTED information shall be transmitted or accessed electronically (e.g. point to point computer links) via a public network like the Internet, using commercial encryption devices accepted by the UK MOD. Advice on encryption requirements for the transmission of RESTRICTED information shall be sought from the UK MOD via the Authority. However, in cases where there is a pressing business need, telephone conversations, video conferencing or facsimile transmissions containing UK RESTRICTED information may be in clear text. In such cases where a pressing business need has been identified, both parties need to accept that there exists the potential for a risk of compromise. When taking a decision to communicate UK RESTRICTED information in this way they should be aware of the impact of disclosure.

f. **Security Accounting and Audit.** Security relevant events fall into two categories, namely legitimate events and violations.

(1) The following events shall always be recorded:

(a) All log on attempts whether successful or failed. (b) Log off (including time out where applicable). (c) The creation, deletion or alteration of access rights and privileges. (d) The creation, deletion or alteration of passwords.

(2) For each of the events listed above, the following information is to be recorded:

(a) Type of event, (b) User ID, (c) Date & Time (d) Device ID

The accounting records shall have a facility to provide the System Manager with a hard copy of all or selected activity. There shall also be a facility for the records to be printed in an easily readable form. All security records are to be inaccessible to users without a need to know.

If the operating system is unable to provide this then the equipment shall be protected by physical means when not in use i.e. locked away or the hard drive removed and locked away.

g. **Integrity & Availability.** The following supporting measures shall be implemented:

(1) Provide general protection against normally foreseeable accidents/mishaps and known recurrent problems (e.g. viruses and power supply variations) (2) Defined Business Contingency Plan (3) Data backup with local storage (4) Anti Virus Software (Implementation, with updates, of an acceptable industry standard Anti-virus software). h. **Logon Banners** Wherever possible, a “Logon Banner” shall be provided to summarise the requirements for access to a system which may be needed to institute legal action in case of any breach occurring.

(1) A suggested format for the text depending on national legal requirements could be:

(a) “Unauthorised access to this computer system may constitute a criminal offence”

i. **Unattended Terminals.** Users are to be automatically logged off the system if their terminals have been inactive for some predetermined period of time, or systems must activate a password protected screen saver after 15 minutes of inactivity, to prevent an attacker making use of an unattended terminal.

j. **Internet Connections.** Computer systems shall not be connected direct to the Internet unless protected by a firewall (a software based personal firewall is the minimum).

k. **Disposal** Before IT storage media (e.g. disks) are disposed of, an erasure product shall be used to overwrite the data. This is a more thorough process than deletion of files, which does not remove the data.

**Laptops**

17. Laptops holding any MoD supplied information are to have a FIPS 140-2 approved full disk encryption solution installed as a minimum.

18. Unencrypted laptops not on a secure site are to be recalled and only used or stored in an appropriately secure location until further notice or until approved full encryption is installed.

19. Unencrypted laptops and drives containing personal data are not to be taken outside of secure sites. For the avoidance of doubt the term “drives” includes all removable, recordable media (e.g. memory sticks, compact flash, recordable optical media (e.g. CDs and DVDs), floppy discs and external hard drives.

20. Any token, touch memory device or password(s) associated with the encryption package is to be kept separate from the machine whenever the machine is not in use, left unattended or in transit.

21. Portable CIS devices holding MOD data are not to be left unattended in any public location. They are not to be left unattended in any motor vehicles either in view or in the boot or luggage compartment at any time. When the vehicle is being driven the CIS is to be secured out of sight in the glove compartment, boot or luggage compartment as appropriate to deter opportunist theft.

**Sub-Contracts**

22. The Contractor may sub-contract any elements of this Contract to Sub-contractors within its own country or the United Kingdom. When doing so, these security conditions shall be incorporated within the Sub-contract document. The prior approval of the Authority shall be obtained should the Contractor wish to sub-contract any elements of the Contract to a contractor in a third country.

**Destruction**

1 Secure Sites are defined as either Government premises or secured offices on the contractor premises 23. As soon as no longer required, UK RESTRICTED information/material shall be destroyed in such a way as to make reconstitution very difficult or impossible, for example, by burning, shredding or tearing into small pieces. Unwanted UK RESTRICTED information/material that cannot be destroyed in such a way shall be returned to the Authority.

Interpretation/Guidance

24. Advice regarding the interpretation of the above requirements should be sought from the Authority.

25. Further requirements, advice and guidance for the protection of MOD information at the level of RESTRICTED and below can be found in Industrial Security Notices (ISNs) at:

http://www.mod.uk/DefenceInternet/AboutDefence/CorporatePublications/SecurityandIntelligencePublications/PSyA/IndustrySecurityNoticesisns.htm

### Whole Life Cost (WLC) Questionnaire

| Description | Qty | Firm Price Each | Firm Price Total | Authority Costs - See Note 1 | |----------------------------------------------------------------------------|-----|-----------------|-----------------|------------------------------| | Design, development and integration of an Emergency Personal Locator Beacon (EPLB) System in accordance with the Statement of Work at Annex A to Contract and System Requirements Document at Annex B to Contract. | n/a | n/a | £X | £X | | Provision of an EPLB **Live Operational - Ejection Variant** | 529 | £X | £X | | | Provision of an EPLB **Live Operational - Non-Ejection Variant (Worn)** | 2596| £X | £X | | | Provision of an EPLB **Live Operational - Non-Ejection Variant (Stowed)** | 649 | £X | £X | | | Provision of an EPLB **SAR Training Variant** | 25 | £X | £X | | | Provision of an EPLB **SERE/ SE Ft Training Variant** | 335 | £X | £X | | | Provision of an EPLB **Live Testing Variant** | 15 | £X | £X | | | Provision of an EPLB **Space and Weight Variant** | 4 | £X | £X | | | Provision of a service fit **MK41** Jacket Modification Kits | 165 | £X | £X | | | Provision of a service fit **MK40** Jacket Modification Kits | 650 | £X | £X | | | Provision of a service fit **MK61** Jacket Modification Kits | 450 | £X | £X | | | Provision of a service fit **MK65** Jacket Modification Kits | 45 | £X | £X | | | Provision of a service fit **MK66** Jacket Modification Kits | 140 | £X | £X | | | Provision of a service fit **BALCS** Jacket Modification Kits | 2300| £X | £X | | | Provision of a service fit **Typhoon LSJ** Jacket Modification Kits | 142 | n/a | £X | £X | | Provision of Initial In Service Support for the EPLB System in accordance with para 92 of the Statement of Work at Annex A and the Integrated Support Plan (ISP) at Annex C. | n/a | n/a | £X | £X | | Provision of Full In Service Support for the EPLB System in accordance with the Statement of Work at Annex A and the Integrated Support Plan (ISP) at Annex C, for a period of 15 years from the Full In Service Support Start Date. | n/a | n/a | £X | £X |

**Note 1.** The Tender is requested to consider and declare any other costs which would fall to the Authority as a result of the introduction of EPLB to into service. Within the "Authority costs" column, the Tenderer shall identify those costs, with supporting evidence to justify their response. Examples could be any additional articles or and or services the Authority would be expected to provide in order to supplement the Tenderer's EPLB proposal.

**Note 2.** Tenderers shall note that the Authority's price assessment of the Tenderer's proposal (ASD Section 5 - ID 1122) shall be on the Whole Life Costs (WLC) of the proposal, and shall be based upon the sum of the Tendered prices in addition to any other "Authority costs" which are identified by the Tenderer (see Note 1), or are identified by the Authority during the assessment process.